TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g
Inefficient Regular Expression Complexity in moment
Priority HIGH 72
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
RHSA-2022:6277
Red Hat OpenShift Service Mesh 2.1.5 security update
Released 2022-08-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenShift Service Mesh 2.1 servicemesh-2.1.5-1.el8, servicemesh-cni-2.1.5-1.el8, servicemesh-operator-2.1.5-1.el8 +6
Fixes 7 records
TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4
Path Traversal in Moment.js
Priority MEDIUM 54
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
TI-2022-08493 CVE-2022-24675 · GHSA-q42m-q8hq-53rj
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
Priority MEDIUM 45
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
TI-2022-11099 CVE-2022-28327 · GHSA-v5qw-m6mv-3q79
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1…
Priority MEDIUM 40
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
TI-2022-08727 CVE-2022-24921 · GHSA-6685-ffxp-xm6f
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
Priority LOW 39
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
TI-2022-11985 CVE-2022-29526 · GHSA-p782-xgp4-8hr8
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment.
Priority LOW 29
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment.
TI-2022-12765 CVE-2022-30629 · GHSA-j55j-52j7-vq87
Session tickets lack random ticket_age_add in crypto/tls
Priority LOW 18
Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during…